Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/G-Li-L-zA7H6Qn6pMuDlxkytSX4.roa
File: G-Li-L-zA7H6Qn6pMuDlxkytSX4.roa (raw, json)
Hash identifier: BZ5UdsB1reU6sjcwql7G9vuteBg1izPh1zN+tFMWy68=
Subject key identifier: 1B:E2:E2:F8:BF:B3:03:B1:FA:42:7E:A9:32:E0:E5:C6:4C:AD:49:7E
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 018CC3494180CD4A225C95EF3ECE324E62D6
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/G-Li-L-zA7H6Qn6pMuDlxkytSX4.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12417
IP address blocks: 212.44.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:41:80:cd:4a:22:5c:95:ef:3e:ce:32:4e:62:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1be2e2f8bfb303b1fa427ea932e0e5c64cad497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:5b:ec:bd:a1:13:4b:ff:e9:18:1d:d3:ca:
14:f3:1b:35:1e:f5:4c:85:1d:b1:bc:1b:9d:87:08:
71:9f:99:cd:b9:7d:dc:3e:8d:a9:f8:3f:69:a4:57:
cd:fc:5f:f6:2a:b2:65:8b:81:d1:43:f7:eb:18:e9:
01:93:41:f0:10:75:4b:9b:87:57:fa:a0:01:9a:06:
83:b4:25:50:37:db:48:12:1a:9d:1c:b4:09:89:b3:
3a:30:fc:71:ee:b7:24:d4:ec:b5:66:07:de:c7:5c:
0e:9e:3c:27:7c:98:1d:f8:db:48:10:0e:9c:bc:c2:
e5:fa:92:24:2f:f7:63:71:c9:25:15:29:25:db:18:
ce:9f:ed:da:ac:ba:cb:9f:52:dc:ff:94:a5:72:b9:
1b:f8:ff:c5:79:34:c8:c6:12:24:1e:82:b8:99:b1:
2a:52:b3:5d:0b:c0:9e:f1:54:bb:07:46:69:ae:bc:
8d:6c:18:c7:a3:ca:0d:97:1b:d2:90:a1:92:59:0b:
ad:c1:c3:65:5f:33:84:86:26:47:04:b1:f1:01:f9:
25:27:6d:0e:a0:2f:96:34:47:cf:48:b4:3c:66:64:
f7:96:06:b1:3b:e7:e6:69:82:e5:38:8d:02:39:ac:
fb:9c:8b:32:e1:23:32:29:6b:4b:52:a0:e5:9b:96:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:E2:F8:BF:B3:03:B1:FA:42:7E:A9:32:E0:E5:C6:4C:AD:49:7E
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/G-Li-L-zA7H6Qn6pMuDlxkytSX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
58:16:76:23:10:d6:da:4a:a6:84:cb:31:4e:f3:63:ca:fd:4b:
13:5c:8f:bd:fb:fe:3f:e3:eb:d4:38:b2:53:97:d7:50:07:0f:
cf:ea:53:a3:80:2b:9f:b3:3e:92:af:a6:83:55:de:11:f3:81:
1c:fd:8e:d7:1e:62:d4:74:ae:7d:9e:73:9e:7f:86:8d:e1:91:
5e:e4:95:6d:b1:a8:36:bb:d9:a6:1d:9f:81:cb:2c:11:49:6f:
24:b0:96:01:b1:ad:4f:4d:ca:fa:54:69:a7:f2:cc:b7:2b:77:
63:19:1f:5e:dd:29:ac:bc:10:9a:48:60:80:a0:6b:32:67:ae:
4e:17:ed:f3:31:dc:c3:57:9c:fb:0a:e1:b6:cb:61:1e:bd:40:
c7:e0:c8:d7:78:10:da:cb:30:e4:30:c8:9b:1b:fd:33:98:ed:
74:9e:47:50:95:85:36:13:ec:ac:dc:f7:3b:4e:ff:50:5a:45:
64:34:ef:33:1a:11:5f:a7:11:11:0b:0b:c9:cc:21:74:86:26:
85:3b:d3:96:44:e5:f2:a4:54:84:89:16:21:1a:10:66:65:82:
a0:25:b7:f5:e9:98:8f:86:30:d0:65:8c:9c:d3:61:d7:26:22:
42:50:b7:68:92:3d:26:8d:be:88:64:05:64:6d:8d:42:3e:a7:
8e:0f:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:23 2024 by rpki-client on console-ams.rpki-client.org